Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
File:                     PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft (raw, json)
Hash identifier:          X8zW4qxJD+tokl4RlQ6iahw8LnYZ5Bxb+6e0otmHpPI=
Subject key identifier:   18:2B:2F:92:00:30:C6:22:12:94:66:F3:F0:A5:E6:3D:F7:2F:C3:BD
Authority key identifier: 3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54
Certificate issuer:       /CN=3d8a553e05f0319bf452fa206c14ccda87304654
Certificate serial:       019EB9FD59BB6CF3619B909B3798400AB0D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
Manifest number:          1364
Signing time:             Fri 12 Jun 2026 04:00:48 +0000
Manifest this update:     Fri 12 Jun 2026 04:00:48 +0000
Manifest next update:     Sat 13 Jun 2026 04:00:48 +0000
Files and hashes:         1: 7XPR057HTONIllGtY9NijiuY-tk.roa (hash: rKfjiDRkcr3HFT8PmmA3P0sCBQ3drFmQ5QDnLKCb/BE=)
                          2: PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl (hash: worTE0jveU8+X5NBzaiCIsrP2eLXHYfk7pfOJnQbrtg=)
                          3: T4FApCxhFe83q9A7YZlC1nZYzIE.roa (hash: LjUt5usAgPWHNriSJWMg7OS8Oagi6w46/dUqLi/UEzA=)
                          4: Wn-ZLE8xGx2iUZq_8EgFIe3BY1M.roa (hash: SwGxPAdfidv7O5nNS+nKj4I72Qs5sJPeTh9qbwfsZWo=)
                          5: YuGYvjrFzLezHsgzIUZ0asWCqVk.roa (hash: aZLneGXD5YvsOe9tvMiGcrBxDYxxGmpY4vDCZwd72Z8=)
                          6: fLae4aR9HsO6ApeohQnbJHEsvgg.roa (hash: /b3Xi59hV2RbWadggK4I0wXvCWO8lTHkzV3V9hJ6K0Y=)
                          7: jccKxXf-KlBy0OODUdeGAP1Pln4.roa (hash: kXcgJH+D8EkeDblDPw+VtydCo7evj5I/OxvPnwmyUe8=)
                          8: r2cUyHBMaewNpNV3po9MOZwNcyU.roa (hash: SVkhtUySEPUVdVwXoSgDIclbqsQ0muf2pONZTDoO/YE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:fd:59:bb:6c:f3:61:9b:90:9b:37:98:40:0a:b0:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d8a553e05f0319bf452fa206c14ccda87304654
        Validity
            Not Before: Jun 12 04:00:48 2026 GMT
            Not After : Jun 13 04:00:48 2026 GMT
        Subject: CN=182b2f920030c622129466f3f0a5e63df72fc3bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8d:e7:23:42:b5:00:a4:55:e1:e1:35:16:65:
                    48:c9:6b:02:49:27:a9:04:df:40:12:ad:90:f4:89:
                    aa:3b:b6:3d:c2:e0:f2:7a:37:19:00:f5:89:8a:9b:
                    ef:b0:14:4e:cd:c3:14:09:ba:1d:b9:3f:3d:34:76:
                    95:1b:83:e5:4b:de:b6:2e:b6:8d:79:0b:ca:89:ca:
                    91:ef:69:7e:3d:8f:20:6a:7f:92:34:e7:a4:66:a2:
                    ba:b4:9f:d0:03:b8:6c:93:dd:12:ce:3d:f1:8d:ce:
                    21:ce:69:ef:ad:95:c9:38:7e:57:d0:75:c6:a6:12:
                    45:88:02:53:6e:0d:b2:b3:3f:07:e1:d4:01:18:6e:
                    65:82:47:8b:7c:4c:c7:b0:b7:ef:fb:00:3e:c4:e5:
                    c4:1b:3c:5a:69:a7:fc:0a:9c:0a:c7:0f:ca:3e:e6:
                    d4:7a:5d:3c:1c:0b:76:36:ec:09:f5:45:6c:bf:71:
                    44:5f:23:7a:8f:30:8a:31:1d:9c:bc:8b:2b:10:f2:
                    8e:82:20:04:6a:39:ee:ca:f2:01:3d:d0:c4:4d:e5:
                    87:1a:ef:dd:ad:fa:7d:f7:c1:88:bf:0d:d0:4a:1b:
                    25:e5:35:d3:3d:c5:32:df:9f:f5:d0:5e:e5:e1:4f:
                    65:0a:5d:0b:b6:8d:e1:8c:41:e7:c0:3b:da:03:5e:
                    ac:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2B:2F:92:00:30:C6:22:12:94:66:F3:F0:A5:E6:3D:F7:2F:C3:BD
            X509v3 Authority Key Identifier:
                keyid:3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:59:d4:5c:04:d8:e7:7e:62:9f:30:1f:2b:23:4c:53:9e:4e:
         86:d8:13:d7:19:86:e0:56:02:4f:68:32:cb:5f:99:5b:63:d1:
         2c:91:77:8c:69:89:32:14:44:00:26:0d:24:0a:29:24:4b:a1:
         3a:4c:02:02:3b:b7:08:aa:53:c8:a1:b4:2b:4c:2d:3c:1d:a4:
         ca:6a:0c:53:45:bc:5d:a6:29:ce:90:b5:d9:69:56:43:53:2e:
         a8:6a:96:af:96:09:91:ac:28:c6:76:4c:17:a1:c6:5c:2f:b0:
         b5:73:b6:4d:b9:35:53:c7:f5:5c:15:45:65:f8:90:a8:f5:fb:
         1e:10:0f:ff:7f:1e:75:76:85:da:f4:e1:16:97:ee:6c:1b:69:
         1e:ee:2e:3a:58:1b:d5:da:38:05:86:d1:b2:07:2b:95:7a:99:
         d4:46:a7:7b:9d:c8:f0:03:8e:f0:d8:11:cd:ae:75:d0:86:79:
         cd:b7:85:69:a8:b0:a6:c6:c4:96:22:6f:b3:7d:e8:50:31:61:
         b3:3c:c1:8f:9c:d0:d6:ee:14:f3:81:af:14:15:09:92:8b:18:
         c8:bb:b9:49:fb:a2:c1:e3:a0:ca:14:48:71:5f:f5:93:28:37:
         86:ae:8f:ad:c6:1b:42:1a:ea:92:67:a9:77:85:f0:d5:c6:aa:
         bc:24:1e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:29:05 2026 by rpki-client